POLÍTICAS DE SEGURANÇA DA INFORMAÇÃO ALINHADAS A ISO 27001 COM BASE NA OWASP TOP 10 APLICADAS À GERÊNCIA DE PROJETOS PARA APLICAÇÕES WEB.

Abstract

Web security is fundamental for us to use the services and systems available on the network safely, so a secure web development should be applied from the beginning of a project. The use of Information Security Policies is a good way to control and standardize safe development methods for teams. The purpose of this research was to show information security policies created which are based on vulnerabilities A04: Insecure Design and A07: Identification and authentication failures, from the OWASP Top Ten 2021 project and are also based on the LGPD, ISO 27001 and ISO 27002. In order to illustrate this scenario, we used the project management software GanttProject along with GanttProject Cloud for sharing the project in teams, being displayed in an intuitive and easy to undestand way. In this way, it is intended to assist undergraduate students and development professionals as a whole, in the development of secure systems, minimizing risks.